Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa
File:                     2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa (raw, json)
Hash identifier:          skCOxURQ2t9SBHwGHufUXqVvUopRC/7Pkr1E7nLq5eM=
Subject key identifier:   1F:52:48:B2:5B:9E:DC:13:55:72:16:0A:FF:24:3E:50:B7:FF:F3:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846E3E1D78D72EF5D986D043B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa
Signing time:             Fri 16 Aug 2024 01:36:33 +0000
ROA not before:           Fri 16 Aug 2024 01:36:33 +0000
ROA not after:            Thu 14 Nov 2024 02:36:33 +0000
asID:                     6167
IP address blocks:        2600:100d:b0ca::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:e1:d7:8d:72:ef:5d:98:6d:04:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:36:33 2024 GMT
            Not After : Nov 14 02:36:33 2024 GMT
        Subject: CN=d3c7126b-2cbb-4934-a6f4-8bbfcdac3c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:72:e0:97:b5:f0:e9:37:af:b3:6c:99:38:
                    89:07:b0:ec:97:c3:b6:c8:0f:19:0c:d5:79:dd:72:
                    37:74:4b:2f:69:e0:40:33:b2:da:1a:a5:48:0a:3e:
                    20:22:9c:7a:dc:e9:66:26:bd:c5:68:38:d6:c8:18:
                    d5:9b:27:5c:45:62:7d:df:40:6e:cf:ab:41:ec:eb:
                    b3:95:71:fc:3b:7b:0e:a9:0d:5e:04:3e:5e:ab:22:
                    92:96:b7:dc:36:6e:32:95:d4:11:40:07:c6:d7:96:
                    07:1c:89:fa:3b:59:ae:7f:da:41:67:2b:7d:42:15:
                    cf:a9:cb:29:73:37:bf:91:32:9b:9b:45:41:55:04:
                    27:07:15:e5:9d:6b:ab:6f:11:72:20:6b:20:eb:a3:
                    f6:55:92:71:d0:eb:b8:e1:c4:a4:26:c5:f6:31:89:
                    c2:33:fa:68:66:46:5e:d7:a8:7f:93:c8:15:d4:da:
                    44:95:03:63:36:bf:be:ca:b2:25:61:63:fd:a7:56:
                    52:a3:ce:06:24:c8:30:ae:6e:cd:63:ba:f9:7b:00:
                    3d:af:c1:f8:91:bf:80:c2:a0:36:a5:74:27:33:2c:
                    3b:52:38:f8:42:50:75:d9:75:78:14:15:23:4e:86:
                    02:67:cc:2b:83:f5:0a:f6:54:d3:5f:3d:ca:33:c8:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:52:48:B2:5B:9E:DC:13:55:72:16:0A:FF:24:3E:50:B7:FF:F3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b0ca::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:bd:32:a3:12:ce:d0:30:e3:2a:ae:fa:85:ae:3d:c9:ae:01:
         23:aa:f6:49:b1:15:03:8c:c7:5d:9a:8f:dd:0a:2c:81:f9:b3:
         75:f9:67:d1:3c:f7:23:7a:4e:2b:d8:12:53:e4:5c:93:35:d4:
         bc:08:10:cf:86:37:79:b4:e8:46:81:78:1d:21:bf:8e:12:aa:
         23:04:59:23:51:be:ef:b3:61:a6:6c:9b:86:31:ce:a0:26:ec:
         a1:e4:3f:e1:fd:62:b4:47:cc:03:c5:3b:50:fd:7b:64:d1:e8:
         4f:3c:50:36:5b:83:a8:d2:f0:43:84:ba:9f:7c:7d:5a:a1:70:
         22:2d:26:b1:0f:6f:37:cf:56:6e:1b:45:bb:47:0c:ec:89:e4:
         66:93:9e:27:fe:76:e1:80:dd:cc:97:c6:df:26:5b:cf:01:e3:
         52:a6:fa:08:9c:2f:e4:8a:85:bf:58:d0:7a:a1:86:d0:0d:a3:
         24:76:83:8c:5a:d4:45:88:6b:45:df:51:a3:09:8c:1d:db:3f:
         e7:0e:b3:4d:ab:a1:e5:34:3e:18:da:88:74:80:e3:5e:78:26:
         3c:ee:b7:c0:51:e6:5f:ca:52:37:9c:3a:fd:83:59:5c:14:99:
         0d:c5:1c:ab:c9:7c:46:4b:ea:f1:cc:9c:b4:92:47:82:bf:fe:
         7e:ec:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:13 2024 by rpki-client on console-ams.rpki-client.org